CVE WatchSep 8, 2026

CVE-2026-77106

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintena

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Sep 8, 2026 · Last modified: Sep 8, 2026 · CWE-862

EPSS · 30d

Not enough EPSS history yet.

Technical description

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

Official references

documentation.commvault.comhttps://documentation.commvault.com/securityadvisories/CV_2026_08_8.html

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-839427.8 HIG

—

———Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.4h CVE-2026-839419.9 CRI

—

———Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.4h CVE-2026-818235.3 MED

—

———The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.4h CVE-2026-730147.8 HIG

—

———Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.4h CVE-2026-729665.5 MED

—

———Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.4h CVE-2026-697248.8 HIG

—

———Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4h